CVE-2018-0509

CVE-2018-0509 is a CSRF vulnerability in the epg search result viewer (kkcald) affecting version 0.7.21 and earlier. The exposed issue allows an attacker to hijack the authentication of administrators via unspecified vectors. The related CNVD/JVN records corroborate this CSRF flaw and cite the af...

CVE-2018-0508

Cross-site scripting vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

JVN#91393903: Multiple vulnerabilities in epg search result viewer(kkcald)

epg search result viewerkkcald provided by kkcal contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2018-0508 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/AU:N/C:N/I:P/A:N| Base Score:...

eunis.eea.europa.eu XSS vulnerability

Open Bug Bounty ID: OBB-548537 Description| Value ---|--- Affected Website:| eunis.eea.europa.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

woodman.com.tw XSS vulnerability

Open Bug Bounty ID: OBB-547837 Description| Value ---|--- Affected Website:| woodman.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

chsfc.com.tw XSS vulnerability

Open Bug Bounty ID: OBB-546827 Description| Value ---|--- Affected Website:| chsfc.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

valueisit.com XSS vulnerability

Open Bug Bounty ID: OBB-546434 Description| Value ---|--- Affected Website:| valueisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Dahua Technology IP Camera Predictable Password Algorithm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Dahua Technology IP Camera. Authentication is not required to exploit this vulnerability. The specific flaw exists within the disaster recovery password functionality. If the device uses its defaul...

analizmerkezi.com XSS vulnerability

Open Bug Bounty ID: OBB-477872 Description| Value ---|--- Affected Website:| analizmerkezi.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

WordPress wp-concours plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. wp-concours plugin is used in one of the contests to create the plugin. A cross-site scripting vulnerability exist...

CVE-2017-17719

A cross-site scripting XSS vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the resultmessage parameter to includes/concourspage.php...

beleuchtungdirekt.ch XSS vulnerability

Open Bug Bounty ID: OBB-453843 Description| Value ---|--- Affected Website:| beleuchtungdirekt.ch Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Entrepreneur Dating Script SQL Injection Vulnerability

Entrepreneur Dating Script is a set of online dating site scripts. A SQL injection vulnerability exists in Entrepreneur Dating Script version 2.0.1. A remote attacker can inject SQL commands into the searchresult.php file by sending the 'marital', 'gender', or 'profileid ' parameter to the...

FS Expedia Clone SQL Injection Vulnerability

FS Expedia Clone is an online travel reservation management system based on PHP and MySQL. The system supports booking of airline tickets, hotel reservations and car rentals via the Internet or telephone agents. A SQL injection vulnerability exists in FS Expedia Clone version 1.0. A remote attack...

CVE-2017-17648

Entrepreneur Dating Script 2.0.1 has SQL Injection via the searchresult.php marital, gender, country, or profileid parameter...

CVE-2017-17584

FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...

schule-trifft-technik.de XSS vulnerability

Open Bug Bounty ID: OBB-451000 Description| Value ---|--- Affected Website:| schule-trifft-technik.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wintone.com.cn XSS vulnerability

Open Bug Bounty ID: OBB-444532 Description| Value ---|--- Affected Website:| wintone.com.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

creps-montpellier.org XSS vulnerability

Vulnerable URL: https://www.creps-montpellier.org/search-result?s=+%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4423718 VIP...

infrasofttech.com XSS vulnerability

Vulnerable URL: http://www.infrasofttech.com/search-result?txt="" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 570052 VIP website status:| No Coordinated Disclosure Timeline:...